{"action":"Upgrade github.com/fatedier/frp to 0.70.1 or later.","affected":[{"fixed":"0.70.1","introduced":"0.53.0"}],"component":"github.com/fatedier/frp","cve_ids":["CVE-2026-73564"],"ecosystem":"Go","epss":0.00524,"exploited":false,"fixed_versions":["0.70.1"],"ghsa_id":"GHSA-26gq-p25f-99cp","id":"tcs_01M5KGRVCHJXR48SF6P3FP2YFW","modified_at":"2026-08-18T15:00:19.906003392Z","published_at":"2026-08-18T14:32:29Z","references":["https://osv.dev/vulnerability/GO-2026-6103","https://github.com/fatedier/frp/security/advisories/GHSA-26gq-p25f-99cp","https://github.com/fatedier/frp/commit/7dc7be930e2452ae93fd32f2a77f8c6fcd0b652b","https://github.com/fatedier/frp/pull/5428","https://github.com/fatedier/frp/releases/tag/v0.70.1"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"GO-2026-6103","url":"https://osv.dev/vulnerability/GO-2026-6103"}],"summary":"frp: Unauthenticated Remote Denial of Service in the frp SSH Tunnel Gateway via Integer Overflow in github.com/fatedier/frp"}